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DETAILED ACTION 

Prel im . Amdt/Amendmen t 

1. Receipt is acknowledged of the Amendment filed 05 December 
2005. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

3. Claims 1-6 and 9-10 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bohnert et al (US 5,797,470) in view of 
Anderson et al (US 4186871 A) . 

Re claims 1-6 and 9-10, Bohnert et al discloses a fuel 
dispensing system (fig. 1; col. 3, lines 62 + ) comprising a fuel 
dispenser [14a, 14b, 14c, 20a, 20b, 20c] ; a control system 24 
which is a site controller operatively associated with a 
plurality of fuel dispensers (fig. 2; col. 5, lines 38 + ); an 
indicia entry device 51 allowing a customer to input a 



Application/Control Number: 10/756,893 Page 3 

Art Unit: 2876 

verification indicia; and an encrypting module 59 enabling a 
card reader 53 which is a smart card reader or a magnetic card 
reader to receive and decrypt the encrypted verification indicia 
(figs. 4&7; col. 6, lines 15-25 and lines 53-63). 

Bohnert et al is silent with respect to the card reader 
encrypt account information received from a customer's card. 

Anderson et al teaches a customer inserts a magnetic 
encoded card into card reader 2 and enters his personal 
identification number (PIN) at keyboard 3. Account number 4, or 
other specified validation data, read from the card is converted 
by encryption logic 5 into a number, which is checked at 
comparator 6 for correspondence with PIN 7. An authorization 
signal is generated in response to verification of the 
verification indicia/PIN and the customer is permitted to 
proceed with the desired transaction (fig. 1; col. 4, lines 42- 
50) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
encryption logic of Anderson et al into the system as taught by 
Bohnert et al in order to provide with a more secure system 
wherein both the account information and the PIN are encrypted 
preventing the information from being manipulated during 
processing, thus preventing fraudulent use. 
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4. Claims 11, 12, 14-17 and 19-22 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bohnert et al as 
modified by Anderson et al as applied to claim 1 above, and 
further in view of Johnson et al (US 5,384,850 - cited by the 
applicant) . The teachings of Bohnert et al as modified by 
Anderson et al have been discussed above. 

Re claims 11, 12, 14-17 and 19-22: Bohnert et al as 
modified by Anderson et al have been discussed above and a 
payment card interface separate from the communications 
interface for receiving encrypted customer verification 
information an providing a transaction authorization signal 
(fig. 2; col. 2, line 62 through col. 3, line 34), but fails to 
expressly disclose or fairly suggest that a security module 
associated with the control system providing encryption key 
information to the indicia entry device and the card reader, 
wherein the encryption key information is used by the indicia 
entry device to encrypt the input verification indicia and by 
the card reader to decrypt the encrypted verification indicia. 

Johnson et al teaches the above limitation with a security 
module 2 providing encrypted information to decrypt the 
encrypted verification indicia (col. 8, line 5 through col. 13, 
line 30) . 
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It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Johnson et al into the teachings of Bohnert et 
al /Anderson et al in order to provide Bohnert et al /Anderson et 
al with a more secure and accurate system via a security module, 
which can provide encrypted information to decrypt the encrypted 
verification. Furthermore, such modification would have 

provided Bohnert et al /Anderson et al with a more user- friendly 
system wherein the user does not have to be concerned with 
fraudulent use of the card event. Accordingly, such 

modification would have been an obvious extension as taught by 
Bohnert et al/Anderson et al, well within ordinary skill in the 
art, and therefore an obvious expedient. 

5. Claims 8, 18, 25-26 and 28-29 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bohnert et al as 
modified by Anderson et al and Johnson et al as applied to 
claims 1, 14 and 2 6 above, and further in view of Coppola et al 
(US 6360138 Bl) . The teachings of Bohnert et al as modified by 
Johnson et al have been discussed above. 

Re claims 8, 18, 25-26 and 28-29: Anderson et al further 
discloses the indicia entry device 25 and the card reader are 
each housed with a separate enclosure (fig. 2) . However, 
Bohnert et al as modified by Anderson et al and Johnson et al 
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have been discussed above, but fails to teach or fairly suggest 
that each is enclosed within a tamper-resistant housing. 

Coppola et al teaches a fuel dispensing terminal comprising 
a card reader 96, a display 90 and a keypad 94 preferably 
includes a tamper resistant security module (TRSM) , such as 
security module 34, which provides for encryption of PINs prior 
to delivery to the DM 70 (col. 7, lines 48-58). 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Coppola et al into the teachings of Bohnert et 
al /Anderson et al /Johnson et al in order to provide Bohnert et 
al/Anderson et al/Johnson et al with a more secure system, 
wherein the system will not operate its functions if the card 
reader module being harmed. Furthermore, such modification 
would have been an obvious extension as taught by Bohnert et 
al/Anderson et al/Johnson et al, well within ordinary skill in 
the art, and therefore an obvious expedient. 

6. Claims 13 and 27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bohnert et al as modified by Anderson et 
al and Johnson et al as applied to claim 1 above, and further in 
view of Schneier (Applied Cryptography, pp. 518-522 - cited by 
the applicant) . The teachings of Bohnert et al as modified by 
Anderson et al/Johnson et al have been discussed above. 
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Re claims 13 and 27: Bohnert et al/Anderson et al/Johnson 
et al have been discussed above but fails to expressly disclose 
or fairly suggest that the security module provides the 
encryption key information to the indicia entry device and the 
card reader using an encryption key exchange (herein after EKE) . 

Schneier teaches the above limitation with the uses and 
benefits of using an encryption key exchange (p. 518, line 5 
through p. 522, line 11). 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Schneier into the teachings of Bohnert et 
al/Anderson et al/Johnson et al due to EKE' s high secure (i.e., 
using both symmetric and public-key cryptography) in networking 
communication. Furthermore, such modification would have 

provided Bohnert et al/Anderson et al/Johnson et al with a more 
secure system, and thus a more user-friendly system via its 
privacy protection. Accordingly, such modification would have 
been an obvious extension as taught by Bohnert et al/Anderson et 
al/Johnson et al with a diverse system wherein EKE can be 
implemented with a variety of public-key algorithms, well within 
ordinary skill in the art, and therefore an obvious expedient. 
7. Claims 7 and 23-24 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bohnert et al as modified by Anderson et 
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al and Johnson et al as applied to claims 1 and 19 above, and 
further in view of Campbell (US 4259720 A) . The teachings of 
Bohnert et al as modified by Anderson et al and Johnson et al 
have been discussed above. 

Re claims 7 and 23-24: Bohnert et al as modified by 
Anderson et al and Johnson et al has been discussed above but is 
silent with respect to re-encrypting step prior to sending the 
account information to an authorization network. 

Campbell teaches a secure transaction system comprising 
when a transaction request originated at a terminal 10, 12, or 
14 associated with data processing unit 16 is determined to 
correspond to an account which is maintained by an institution 
associated with data processing unit 24, the secret code number 
entered by the customer at the terminal is re-encrypted by 
security module 20' and transmitted by communication line 23 
along with other transaction message portions, which are 
unencrypted, to data processing unit 24, which is associated 
with the bank with which the customer maintains an account (fig. 
3; col. 7, line 24-59). 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
re-encrypting step of Campbell into the system as taught by 
Bohnert et al/Anderson et al/Johnson et al in order to provide 



Application/Control Number: 10/756,893 Page 9 

Art Unit: 2876 

Bohnert et al/Anderson et al/Johnson et al with a more secure 
and more universal system which can be utilized with accounts 
from different banks, and each individual bank have a unique 
encrypting technique/method, thus preventing information from 
being stolen during transmitting through the network. 

Response to Arguments 

8. Applicant's arguments with respect to claims 1-35 have been 
considered but are moot in view of the new ground (s) of 
rejection. 

Newly cited reference to Anderson et al has been used in 
the new ground of rejection to further meet the limitation of 
the claimed invention. 

Conclusion 

9. Applicant's amendment necessitated the new ground (s) of 
rejection presented in this Office action. Accordingly, THIS 
ACTION IS MADE FINAL. See MPEP § 706.07 (a). Applicant is 
reminded of the extension of time policy as set forth in 37 
CFR 1.136(a) . 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
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of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE -MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Uyen-Chau 
N. Le whose telephone number is 571-272-2397. The examiner can 
normally be reached on First Monday 5 : 3 0AM- 1 : 3 0PM and Tues-Fri 
5.-30AM-3PM. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Michael G. Lee can be 
reached on 571-272-2398. The fax phone number for the 

organization where this application or proceeding is assigned is 
571-273-8300. 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . 




Uyen-Chau N. Le 
Primary Examiner 
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